This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f3b9a93-818c-4623-b024-ab1a75263cae.roa File: 7f3b9a93-818c-4623-b024-ab1a75263cae.roa (raw, json) Hash identifier: lRwemaRkY1AeZPRmHDUwsMa73yxHrDQK9V78c+gtcTs= Subject key identifier: DF:93:2A:12:DC:5C:58:37:FC:B8:CE:5C:3F:C7:BF:E4:4D:85:72:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24406F6CE6D477A7EB86E35AFA44C8162A870554 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f3b9a93-818c-4623-b024-ab1a75263cae.roa Signing time: Sun 23 Nov 2025 00:10:35 +0000 ROA not before: Sun 23 Nov 2025 00:10:35 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:40:6f:6c:e6:d4:77:a7:eb:86:e3:5a:fa:44:c8:16:2a:87:05:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:10:35 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=9c09ea6f6e5b5f6ca9f8fe1724e127d967392f52b6d0a0611d731e8be0fc5b7e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:f9:23:be:78:24:fb:ff:89:93:a5:24:27: 76:78:c9:6e:6e:75:e7:8e:a1:ef:e5:a3:84:34:8d: 0a:e9:47:2a:c2:f8:b4:45:61:b3:05:69:5a:c2:d7: 7f:80:1b:95:4a:2d:ac:45:c9:31:b0:42:f8:d1:67: 22:11:a1:93:ca:f0:30:32:16:0d:98:7d:07:a4:04: 4d:f4:2b:ca:4c:19:11:ab:ed:5e:f4:d3:2d:ed:59: 8a:b7:6d:03:c7:66:cf:49:37:8f:2a:5a:ee:c6:31: 8a:84:83:c1:75:eb:53:e7:4c:1d:08:ed:f9:5f:13: 43:45:a2:bf:31:8e:2f:28:30:37:d5:3b:7e:55:32: fe:3a:82:e2:26:85:2e:6f:66:79:fe:00:e3:cc:a6: 5c:a6:48:51:03:e6:37:83:ee:dd:54:2c:c1:2a:5e: aa:68:d5:aa:61:1e:b5:c0:47:45:5d:d6:24:ec:b1: 34:b1:3a:62:d1:62:7b:82:58:2c:c2:58:bc:08:cc: 19:c9:86:dc:a2:21:11:c7:db:23:9f:4f:e4:1b:88: 0f:b5:21:2b:86:ec:99:59:0a:15:1e:a2:6b:21:09: 44:8e:c8:49:e5:5a:2c:b7:bb:0e:71:73:08:fc:4f: c9:1c:73:49:8f:cd:ec:ed:f7:b5:a8:d4:44:9a:49: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:93:2A:12:DC:5C:58:37:FC:B8:CE:5C:3F:C7:BF:E4:4D:85:72:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f3b9a93-818c-4623-b024-ab1a75263cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4880::/46 Signature Algorithm: sha256WithRSAEncryption 3a:16:df:bb:26:8d:3a:4b:24:46:ad:41:78:71:a0:7e:9f:ea: f6:1c:65:64:4b:13:4d:a5:55:31:92:52:2b:8f:02:b2:87:57: f6:67:40:f3:b9:96:4b:f5:37:87:32:a5:5e:b8:e6:59:76:f1: e4:1e:3f:d6:a9:e3:4f:7f:d6:79:fd:b6:18:19:7f:78:f5:04: 2e:03:9b:6d:56:1a:6a:4f:9c:2a:5d:e0:2e:1a:8d:8d:1b:19: 53:33:eb:41:40:5f:14:a1:26:7a:f7:5c:81:5a:74:07:07:bb: d2:e3:33:c3:0e:f6:6e:b7:a1:ac:a4:3e:cb:6f:4d:0a:05:86: d3:15:b5:3f:a0:7c:09:3c:53:5b:97:fe:83:71:7f:97:4a:a8: d1:5b:bd:53:4e:5f:5a:bd:6d:e7:99:af:8a:25:f0:a4:ed:c4: 07:37:19:8b:75:85:e2:2e:3e:2e:a6:9b:59:78:64:35:4b:f8: 46:e0:13:f9:ab:f4:ff:e1:68:76:b8:ca:c5:fc:21:a9:7e:0d: a9:bb:64:f5:47:04:6d:db:03:fa:19:f2:88:7f:d4:0a:a8:3e: 4b:59:45:f4:f0:ae:04:5a:7b:a5:44:c5:86:1c:7e:21:b6:36: f6:0a:62:5e:04:3d:b3:d3:89:e0:de:56:5c:75:dd:7b:1c:dc: 4c:5a:eb:96 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJEBvbObUd6frhuNa+kTIFiqHBVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTAzNVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAOWMwOWVhNmY2ZTViNWY2Y2E5Zjhm ZTE3MjRlMTI3ZDk2NzM5MmY1MmI2ZDBhMDYxMWQ3MzFlOGJlMGZjNWI3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozj5I754JPv/iZOlJCd2eMlubnXn jqHv5aOENI0K6Ucqwvi0RWGzBWlawtd/gBuVSi2sRckxsEL40WciEaGTyvAwMhYN mH0HpARN9CvKTBkRq+1e9NMt7VmKt20Dx2bPSTePKlruxjGKhIPBdetT50wdCO35 XxNDRaK/MY4vKDA31Tt+VTL+OoLiJoUub2Z5/gDjzKZcpkhRA+Y3g+7dVCzBKl6q aNWqYR61wEdFXdYk7LE0sTpi0WJ7glgswli8CMwZyYbcoiERx9sjn0/kG4gPtSEr huyZWQoVHqJrIQlEjshJ5Vost7sOcXMI/E/JHHNJj83s7fe1qNREmkls+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN+TKhLcXFg3/LjOXD/Hv+RNhXJtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmM2I5YTkzLTgxOGMtNDYyMy1iMDI0LWFiMWE3NTI2M2NhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80iAMA0GCSqGSIb3DQEBCwUAA4IBAQA6Ft+7Jo06SyRGrUF4 caB+n+r2HGVkSxNNpVUxklIrjwKyh1f2Z0DzuZZL9TeHMqVeuOZZdvHkHj/WqeNP f9Z5/bYYGX949QQuA5ttVhpqT5wqXeAuGo2NGxlTM+tBQF8UoSZ691yBWnQHB7vS 4zPDDvZut6GspD7Lb00KBYbTFbU/oHwJPFNbl/6DcX+XSqjRW71TTl9avW3nma+K JfCk7cQHNxmLdYXiLj4upptZeGQ1S/hG4BP5q/T/4Wh2uMrF/CGpfg2pu2T1RwRt 2wP6GfKIf9QKqD5LWUX08K4EWnulRMWGHH4htjb2CmJeBD2z04ng3lZcdd17HNxM WuuW -----END CERTIFICATE-----Generated at Sun Nov 23 05:43:02 2025 by rpki-client